RE: [Syslog] Syslog-sign & -protocol

2006-08-14 Thread Rainer Gerhards
Chris, Sorry, I obviously had a previous copy cached... I've just downloaded a fresh one and started re-reading it. As you say, it already is adapted to syslog-protocol. Let me raise one point without being completely through with it: -sign now supports RFC 3164, 3195 and -protocol format. I see

RE: [Syslog] timeline

2006-08-14 Thread Rainer Gerhards
Miao, I am actually concerned about backward compatibility with existing code *without* the need to upgrade any of that code. As you know, deployed software tends to stick. If we use just LF, existing, deployed technology (e.g. syslog-ng with stunnel) would be able to understand a message sent fr

RE: [Syslog] timeline

2006-08-14 Thread Miao Fuyou
Hi, Rainer, A new implementation could rely on byte-counting only and then delete LF from the frame(appplication knows exactly where the LF is), it may not force us to use escapes. For LF, I think it is difficult to get 100% compatibility for a legacy implementation to comply TLS-transport witho

RE: [Syslog] Syslog-sign & -protocol

2006-08-14 Thread David Harrington
Hi, When can we get an updated revision of syslog-sign? Our current timeline calls for starting WGLC Aug 28. The changes sound sufficiently large that we should definitely try to review the changes before we start a last call on the document. David Harrington [EMAIL PROTECTED] [EMAIL PROTECTED

RE: [Syslog] syslog WG Timeline

2006-08-14 Thread David Harrington
Hi, This message officially starts the Syslog Working Group Last Call for the following two documents: draft-ietf-syslog-protocol: http://www.ietf.org/internet-drafts/draft-ietf-syslog-protocol-17.txt draft-ietf-syslog-transport-udp: http://www.ietf.org/internet-drafts/draft-ietf-syslog-transpor

RE: [Syslog] delineated datagrams

2006-08-14 Thread David Harrington
Hi Tom, You're right; I didn't go far enough. I was looking for a framing defined by the netconf protocol, not the separator of messages within a transport. Unfortunately, Netconf uses a number of transport-dependent schemes within the multiple transports it supports, including both octet-counting

Re: [Syslog] Syslog-sign & -protocol

2006-08-14 Thread Chris Lonvick
Hi All, On Sun, 13 Aug 2006, Rainer Gerhards wrote: Hi, A general comment: syslog-sign is still based on rfc 3164 and has ist own format definitions. It needs to be edited to utilize the new work in syslog-protocol. It should now use structured data for ist signature blocks. Alex has moved

RE: [Syslog] delineated datagrams

2006-08-14 Thread Rainer Gerhards
> -Original Message- > From: Chris Lonvick [mailto:[EMAIL PROTECTED] > Sent: Monday, August 14, 2006 8:20 AM > To: Tom Petch > Cc: [EMAIL PROTECTED] > Subject: Re: [Syslog] delineated datagrams > > Hi Tom and All, > > What I've seen discussed: > - There is no character or character se

Re: [Syslog] delineated datagrams

2006-08-14 Thread Chris Lonvick
Hi Tom and All, What I've seen discussed: - There is no character or character sequence that cannot be used in the syslog payload, which might confuse a parser looking to delineate messages in a single packet based upon a character or character sequence. - Byte counting can provide assuranc

Re: [Syslog] timeline

2006-08-14 Thread tom.petch
- Original Message - From: "David Harrington" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, August 10, 2006 7:33 PM Subject: [Syslog] timeline > > 1) whether draft-ietf-syslog-transport-tls should use byte-counting, > special character, or both, including which special chara